Privacy Policy

When you use ShipProof, we store:

• Your email address (from GitHub sign-in)
• Your GitHub username
• Scan results — issue names, severity, fix prompts, and scores
• Which repo you scanned and when

We do not store your source code. Files are fetched from GitHub only during a scan, analyzed in memory, and discarded. We never save a copy of your codebase.

We use your information only to run ShipProof — sign you in, run scans, show your reports, and save your scan history. We don't sell your data or use it for advertising.

ShipProof relies on these providers to operate:

• Supabase — authentication and database
• Vercel — hosting
• Anthropic — AI-powered code analysis during scans
• GitHub — sign-in and read-only repo access for scanning

Each provider has its own privacy policy. We only share the minimum data needed for the service to work.

We keep your account and scan history until you delete them. If you delete your account, your data is removed from our systems.

You can delete individual scans from your dashboard at any time. To remove your entire account and all associated data, use the delete option in settings (one click).

Questions about privacy? Email us at privacy@shipproof.app.